App statistics very different between CLI and GUI

[kmurphy6]

I ran the command 'show system statistics application' on the CLI of our PA-4020 at the Internet border and see these results....

Virtual System: vsys1
application                      sessions   packets      bytes
-------------------------------- ---------- ------------ ------------
facetime                         36346      55150        36706211790
google-video-base                40330      3466105      62341573161
mozy                             656        11642        2143728771
vimeo                            137485     263408297    259778519788
android-market                   2673       6024245      6362573242
yousendit                        3329       90659        27826458438
yum                              72329      1284043      2050390425
amazon-cloud-player              15729      2464502      2043038257
soap                             923520     24875979     10624880850
facebook-mail                    19774      3435135      2017554859
pcanywhere                       16052      18133        2006225344
ms-exchange                      32235      12012690     6249051910
ssh                              490175     4762525      2368436927123
amazon-cloud-drive-uploading     74         1671838      1878615128
qq-audio-video                   89         1042         1845425531
rss                              2138582    123878273    100605058292
bomgar                           120752     2054117      1817296056
itunes-appstore                  115640     2983296      1808015578
sybase                           1976       3598683      1803018950
web-crawler                      3651427    627714540    259430754242

...but when I go to the GUI of that device and check the ACC page, I see a very different set of applications (no matter if I sort on sessions or bytes). For example, facetime, google-video-base and mozy do not appear in the ACC. The top apps shown in the ACC are typically ones like web-browsing or ssl, which don't appear with the CLI command.

Does anyone else have this same situation? Is the a reason for the differences?

Thanks

[rmonvon]

Hi...The CLI stats is refreshed frequently, every 2 seconds or so, and its stats is updated more often than the ACC.  The ACC is summarizing the traffic usage every 15 minutes.

Thanks.

[mikand]

Doesnt ACC also only show last hour by default where the CLI shows for total uptime?

[rmonvon]

Yes, the ACC default to last hour but that timeframe can be changed. Regardless, the ACC may not include the traffic within the last 15 minutes since it only summarizes every 15 minutes.

Thanks.

[kmurphy6]

Thanks that's very helpful